openSUSE 10 Security Update : kernel (kernel-4970)

This kernel update is a respin of a previous one that broke CPUFREQ support bug 357598. Previous changes : This kernel update fixes the following security problems : CVE-2008-0007: Insufficient range checks in certain fault handlers could be used by local attackers to potentially read or write...

Linux Kernel蓝牙CAPI报文远程溢出漏洞

Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel对入站CAPI消息没有执行正确的处理，远程攻击者可能利用此漏洞在服务器上执行任意指令。 Linux Kernel代码的net/bluetooth/cmtp/capi.c文件中没有正确地处理入站的CAPI消息。如果用户发送了特制的CAPI报文的话，就可能触发缓冲区溢出，覆盖某些内核数据结构，导致执行任意指令。net/bluetooth/cmtp/capi.c中漏洞代码如下： case CAPIFUNCTIONGETSERIALNUMBER: controller =...

CVE-2006-3728: Undefined Security Weakness

Unspecified vulnerability in the kernel in Solaris 10 with patch 118822-29 118844-29 on x86 and without patch 118833-11 118855-08 allows remote authenticated users to cause a denial of service via unspecified vectors that lead to "kernel data structure corruption" that can trigger a system panic,...

security flaw

Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow 1 local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that is being accessed by another thread, or 2 remote attackers to cause a denial of service panic by...

CVE-2004-0814

Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow 1 local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that is being accessed by another thread, or 2 remote attackers to cause a denial of service panic by...

[UNIX] OpenBSD Procfs Memory Disclosure Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Linux Kernel ""do_mremap"" Local Proof of Concept II

No description provided by source. / Proof of concept code for testing domremap Linux kernel bug. It is based on the code by Christophe Devine and Julien Tinnes posted on Bugtraq mailing list on 5 Jan 2004 but it's safer since it avoids any kernel data corruption. The following test was done...

Linux Kernel 2.4.23/2.6.0 - 'do_mremap()' Bound Checking Validator (2)

/ EDB Note: This will just "test" the vulnerability. EDB Note: An exploit version can be found here https://www.exploit-db.com/exploits/145/ / / Proof of concept code for testing domremap Linux kernel bug. It is based on the code by Christophe Devine and Julien Tinnes posted on Bugtraq mailing li...

Linux Kernel "do_mremap" Local Proof of Concept II

Exploit for linux platform in category local exploits ================================================== Linux Kernel "domremap" Local Proof of Concept II ================================================== / Proof of concept code for testing domremap Linux kernel bug. It is based on the code by...

CVE-2003-0984: Undefined Security Weakness

Real time clock RTC routines in Linux kernel 2.4.23 and earlier do not properly initialize their structures, which could leak kernel data to user space...